Thursday, October 13, 2016

Carfentanil and Fentanyl Analogs for Sale on the Web


4-carbomethoxyfentanyl (also known as Carfentanil, carfentanyl, or C-fent on the street) is an extremely potent synthetic intended to be used as an elephant tranquilizer.  C-fent is quickly becoming the low cost drug of choice by users who can purchase the drug for less than a pint of beer. 

On October 5th, 2016, Wapack discovered several Internet locations where Carfentanil, as well as other Fentanyl analogs, are being sold.  These sales were identified in both the public-facing Internet, as well as the deep web.

Publication date:                   7 October 2016

Handling requirements:        Traffic light protocol (TLP) AMBER

Attribution/Threat Actors:    Digital Drug Dealers

Actor Type:                           Adversary capabilities have been assessed as Tier I & II*

Potential Targets:                 Heroine Users; Emergency Responders

*Practitioners who rely on others to develop the malicious code, delivery mechanisms, and execution strategy (use known exploits).
*Practitioners with a greater depth of experience, with the ability to develop their own tools (from publicly known vulnerabilities). 

The full attribution report has been published in its entirety in the Red Sky Alliance portal.  For more information please contact the lab directly at 844-4-WAPACK, 603-606-1246, or feedback@wapacklabs.com.

About Wapack Labs

Wapack Labs, located in New Boston, NH is a Cyber Threat Analysis and Intelligence organization supporting the Red Sky Alliance, the FS-ISAC and individual organizations by offering expert level targeted intelligence analysis answering some of the hardest questions in Cyber.  Wapack Labs’ engineers, researchers and analysts use deep analysis techniques and visualization to design and deliver transformational cyber-security analysis tools that fuse open source and proprietary information.  The intelligence derived from these tools and techniques serve as the foundation of Wapack Labs’ information reporting to the cyber-security teams of its customers and industry partners located around the world.